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Assign a set of verification keys to each 
PDG group that are encrypted 
as a function of the each destination 
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Assign a set of l<ey ID's to each PDG group, where each 
key ID is associated with one of the assigned verification 
keys and is encrypted as a function of the same 
destination used to encrypt the corresponding verification key 
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Require that verification of the postage indicia 
be performded at the destination regions 
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Require each of the postage generating devices to generate the verification 
key assigned to its group and the key ID corresponding to that verification key 
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Create a digital signature for the indicia using the generated verification 
key, and include the digital signature and the key ID on the indicia 
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Use the key ID on the indicia and the verification keys from the 
KDC to to compute a digital signature and compare the digital 
signature with the digital signature on the indicia 
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Create a master secret key, K, and set of secret keys, and 
assign each secret key, Ki, to a group of PDG's, Gi 



I 



Generate and assign a set of n verification keys, Y , for each 
PGD group Gj, where each of the verification keys is calculated 
as a function of a respective destination region 
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Generate and assign a set of key ID's, \.^^\ for each PGD group, 
where each key ID identifies one of the verification keys assigned to that 
group and is also generated as a function a respective destination region 
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Transfer only the master secret key K and 
the secret key Kj to all PGD's in group G,. 
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Transfer only the verification keys and the key ID's that 
were generated as a function of a particular destination 
to the corresponding destination distribution center 
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Receive a master secret key K and a secret 
key K. from the key distribution center 



Generate the indicium in response to receiving 
a request from a user to generate an 
indicium for a mail piece 
destined for a particular destination Dest 



72 



y 


r 


Compute the verification key VP^^^ as a 
function of the secret key Kj and the destination 




Compute the encrypted key ID 
IP^^^ as a function of the destination 




I 



Evidence the indicia by creating a digtial signature for the indicia 

using the computed verification key Vj^®^* and by including 
the digital signature and the computed index IP®®* on the indicia 
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Receive the verification keys VP^^^ and key ID'S 
I Dest generated as a function of the destination 
region serviced by the distribution center 



I 



90 



92 



In response to receiving a mail piece, 
determine the mail piece's destination region 



If the distribution center is not within the destination 
region, transfer the mail piece to the 
distribution center within the destination region 
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If the distribution center is within the destination region, 
begin verifying the postage indicia by reading the 
digital signature and the key ID from the indicia 
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Use the l<ey ID read from the indicia to retrieve the 
corresponding verification key from the table of all verification keys 



Use the retrieved verification key to compute a digital signature for 

the indicia, and compare the computed digital signature with 
the digital signature from the postage indicia to verify the indicia 
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